Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
File:                     97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa (raw, json)
Hash identifier:          HHm9UFqvNn1mve5JmX4wIwGYBp8g2NWMp8iSD8hWKuY=
Subject key identifier:   D0:51:0C:CA:BC:2F:BB:93:AC:0E:F1:1B:4C:08:56:3B:12:06:53:70
Certificate issuer:       /CN=452d8948-a48b-4a64-bb88-5c289408944c
Certificate serial:       010D0C9F43285849F7151655515B87ABED2B3F00
Authority key identifier: 2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     33201
IP address blocks:        23.142.112.0/24 maxlen: 24
                          2602:800:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:16:55:51:5b:87:ab:ed:2b:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452d8948-a48b-4a64-bb88-5c289408944c
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=79e00763-4be8-4f81-ac38-e1ba636146b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:0d:34:0f:75:e0:64:2b:dd:d9:f3:bb:ae:
                    dc:49:5f:4a:4a:db:2c:90:72:60:df:a4:e3:83:96:
                    e4:86:c2:83:d5:30:ee:f5:37:1b:77:8f:e8:3e:25:
                    aa:e5:b6:da:29:25:0e:61:ef:29:88:d6:72:29:cf:
                    67:72:41:2c:18:e0:58:22:8b:8e:ce:ba:f2:19:68:
                    47:67:da:86:19:a7:37:1d:50:f5:c3:b4:07:01:c2:
                    8b:61:41:7e:47:0e:3e:1d:f9:1b:af:28:98:2b:97:
                    3a:09:aa:3d:0f:f9:33:12:da:82:77:a5:fb:15:2b:
                    c9:79:aa:c0:b5:e9:36:5c:24:8d:2e:21:30:52:6a:
                    a0:aa:45:9f:af:59:e9:53:42:fe:f3:8d:0c:82:d2:
                    30:39:b0:5e:5a:22:9f:b9:7a:ed:f3:f5:0b:6d:6b:
                    12:17:24:b4:a9:59:05:55:35:b0:88:33:10:6a:b6:
                    a1:8a:35:87:e9:3f:51:d8:11:d1:f5:a6:b6:35:48:
                    62:be:08:5a:4d:10:28:ec:6d:16:b5:ad:41:1e:6a:
                    5b:1d:5f:92:cd:17:49:0c:e1:1b:3f:a8:75:3e:15:
                    12:7e:d1:57:07:6b:cd:78:20:ba:14:76:9c:c0:13:
                    11:31:96:b5:cd:ee:5c:fd:db:5f:49:5d:7b:ca:a9:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:51:0C:CA:BC:2F:BB:93:AC:0E:F1:1B:4C:08:56:3B:12:06:53:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.112.0/24
                IPv6:
                  2602:800:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:3d:6d:ed:14:0c:27:7b:27:e4:fb:8d:9d:a1:bf:4b:90:25:
         0a:58:47:e9:53:85:23:10:e0:28:49:8d:4b:fa:cf:0b:11:2a:
         0e:12:68:1a:e1:56:86:2f:ae:16:17:3b:d3:38:ee:f3:87:20:
         bd:a9:eb:87:62:42:27:db:1b:f1:94:52:b0:7c:8b:e7:6b:4c:
         07:ec:51:fc:0a:71:32:5a:b5:e5:c5:51:da:5f:e1:19:b3:6f:
         31:c4:b0:ed:a9:4e:e6:27:92:50:20:19:a3:9d:05:8b:1a:8a:
         c2:b6:c3:97:93:7d:1d:4d:63:77:ca:b8:b0:9a:14:2e:e1:91:
         44:7d:cd:c9:e8:f4:f8:d4:bf:85:fe:d8:c1:01:71:73:30:61:
         1a:1e:78:1b:1a:92:ae:2e:f9:67:0c:50:f0:43:e3:5f:3a:52:
         0a:2d:41:ca:d6:4f:2f:a2:4c:19:ef:8d:5c:6e:f9:6e:b3:e9:
         8e:67:ef:56:bf:35:64:58:5a:62:13:76:c1:1f:09:84:ef:83:
         a0:fb:5a:2d:f5:ae:d4:41:50:22:c2:e3:c3:4d:2e:9a:ed:eb:
         ce:e0:23:b8:f8:fe:77:02:f6:97:07:b9:cc:4d:39:ea:ad:99:
         4e:d1:a0:f6:54:15:ee:6e:7f:fc:8b:54:4b:60:35:5f:06:7b:
         0a:b1:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:53:14 2025 by rpki-client